KA 

V r '? 






iA 9^943 



NAVAL POSTGRADUATE SCHOOL 

Monterey, California 




THESIS 

THE EFFECT OF COMPONENT REDUNDANCY 
UPON AIRCRAFT COMBAT SURVIVABILITY 

by 

Angelo J. Kangalos 
December 1983 

Thesis Advisors R. E. Ball 



Approved for public release; distribution unlimited. 




SECURITY CLASSIFICATION OF this RACE (Whin Dmtm Enfrmd) 



REPORT DOCUMENTATION PAGE 


READ INSTRUCTIONS 
BEFORE COMPLETING FORM 


1. REPORT NUMBER 


2. GOVT ACCESSION NO. 


3. RECIPIENT'S CATALOG NUMBER 


4. TITLE (tnd Submit) 

The Effect of Component Redundancy 
j Upon Aircraft Combat Survivability 


5. TYPE OF REPORT & PERIOO COVERED 

Master's Thesis 
December 1983 


6. PERFORMING ORG. REPORT NUMBER 


7. AUTHORS 

Angelo J. Kangalos 


S. CONTRACT OR GRANT NUMBERfA) 


S. PERFORMING ORGANIZATION NAME ANO ADDRESS 

Naval Postgraduate School 
Monterey, California 93943 


10. PROGRAM ELEMENT, PROJECT, TASK 
AREA A WORK UNIT NUMBERS 


• 1- CONTROLLING OFFICE NAME ANO ADDRESS 

Naval Postgraduate School 
1 Monterey, California 93943 


12. REPORT DATE 

December 1983 


13. NUM8ER OF PAGES 
62 


k*. MONITORING AGENCY NAME A AOORESSC// dllloront from Controlling Olltco) 


is. security class. ( oi thi» r.portj 

Unclassified 


I5«. DECLASSIFICATION/ DOWNGRADING 
SCHEOULE 


IS. DISTRIBUTION STATEMENT (ol Oil* Report) 

Approved for public release; distribution unlimited. 


17. DISTRIBUTION STATEMENT (of tho obotrmct on t tod in Block 20, li dt Iterant from Report) 


is. supplementary notes 


It. KEY WORDS (Continue on rowoeoo oldo it neeeoom ry md Identify by bloc* number) 

Aircraft Survivability, Susceptibility Evaluation, Vulnerability 
Evaluation, Probability of Hit Density Function, Probability of 
Kill, Cookie Cutter Kill Function, Carleton Kill Function, 
Redundancy, Transition Matrix, Cumulative Probability of 
Survival, Cumulative Prnhahility of Kill. 


20. ABSTRACT (Conttnuo an roomie oldo It memory md Idontlty^y block number) 

Aircraft combat survivability has developed into a discipline of 
its own. This thesis presents a brief overview of the two 
integral parts of survivability, susceptibility and vulnerability 
i It examines the probability of an aircraft being killed given a 
single shot fired by the enemy. It further examines the 
redundancy of critical components and the effect redundancy 
has on the probability of kill of the aircraft. Several | 

numerical examples are given. The thesis also examines the | 



00 t jam"* 1473 COITION OP 1 NOV •• IS OBSOLETE 

S/N 0102- LF- 014- 6601 



UNCLASSIFIED 



^SECURITY CLASSIFICATION OF THIS PAGE (■Ph«i O ala Wnltrtd) 






SECURITY CLASSIFICATION OF.TWIS PAGE (Whm* Df Entmr+4) 




SECURITY CLASSIFICATION OF THIS PAOEfWR** Dmtm E*Cr+4) 




Approved for public release; distribution unlimited. 



The Effect of Component Redundancy 
Upon Aircraft Combat Survivability 



by 



Angelo J. Kangalos 

Lieutenant Commander, United States Navy 
B.S., Youngstown State University, 1970 



Submitted in partial fulfillment of the 
requirements for the degree of 



MASTER OF SCIENCE IN AERONAUTICAL ENGINEERING 

from the 

NAVAL POSTGRADUATE SCHOOL 
December 19 83 



^/Vzs/ 

V 






ABSTRACT 



C'JOLTTY K r ’0 - '. LI„ _ • 

>. AVAL PC 
i-'ONTCREY . CALIFC.V I *. 



Aircraft combat survivability has developed into a 
discipline of its own. This thesis presents a brief over- 
view of the two integral parts of survivability, suscepti- 
bility and vulnerability. It examines the probability of an 
aircraft being killed given a single shot fired by the enemy. 
It further examines the redundancy of critical components and 
the effect redundancy has on the probability of kill of the 
aircraft. Several numerical examples are given. The thesis 
also examines the Antiaircraft Artillery Simulation Computer 
Program, and the modifications required in order to intro- 
duce component redundancy into it are developed. 



.:ool 

^ 394 ' 



4 



TABLE OF CONTENTS 



I. INTRODUCTION 

A. SUSCEPTIBILITY 

B. VULNERABILITY 

II. PROBABILITY OF KILL GIVEN A SINGLE SHOT 

A. PROBABILITY OF HIT DENSITY FUNCTION 

B. PROBABILITY OF KILL FUNCTION GIVEN A HIT . .. . 

III. REDUNDANCY AND THE P^g 

IV. PROBABILITY OF KILL AND REDUNDANCY 

V. AFATL P001 COMPUTER PROGRAM AND THE P^ . . . . 

VI. CONCLUSIONS 

APPENDIX A. EVALUATION OF EQUATIONS 

APPENDIX B. P CALCULATIONS THROUGH THE TRANSITION 

MATRIX METHOD 

APPENDIX C. P001 'FIRE' SECTION 

LIST OF REFERENCES 

INITIAL DISTRIBUTION LIST 



8 

8 

9 

11 

11 

13 

17 

25 

35 

46 

47 

56 

59 

61 

62 



5 



LIST OF TABLES 



1. CUMULATIVE PROBABILITIES OF KILL FOR EXAMPLE 

AIRCRAFT 32 

2. P.. CALCULATIONS THROUGH THE TRANSITION MATRIX 

METHOD 56 



6 



LIST OF FIGURES 



1. VULNERABILITY OF TWO SEPARATE REDUNDANT CRITICAL 

COMPONENTS, COOKIE CUTTER APPROACH 19 

2. VULNERABILITY OF TWO SEPARATE REDUNDANT CRITICAL 

COMPONENTS, CARLETON APPROACH 20 

3. AIRCRAFT KILL TREE DIAGRAM, FIRST HIT 2 7 

4a. AIRCRAFT KILL TREE DIAGRAM, SECOND HIT ALONE ... 27 

4b. AIRCRAFT KILL TREE DIAGRAM, SECOND HIT ALONE ... 28 

4c. AIRCRAFT KILL TREE DIAGRAM, SECOND HIT ALONE ... 28 

5. CUMULATIVE PROBABILITY OF KILL VERSUS NUMBER OF 

HITS 33 



7 



I. INTRODUCTION 



Since World War I, aircraft combat survivability has 
become a factor of constantly increasing importance to both 
pilots and aircraft designers alike. The definition of air- 
craft combat survivability which will be adopted in this 
study is "the capability of an aircraft to avoid and/or 
withstand a man-made, non-nuclear hostile environment" [1]. 

Given an aircraft flying in a hostile environment, 
there is a probability that the aircraft will be hit by a 
damage causing mechanism and a different probability, that 
the damage causing mechanism will have the catastrophic 
effect of killing the aircraft. These two probabilities are 
of paramount importance, and they will be given special 
attention. 

The probability that the aircraft will be hit, P R , 
is usually referred to as the susceptibility of the aircraft, 
while the probability that the aircraft will be killed, given 
that it has been hit, P K / H • is called the vulnerability 
of the aircraft. 



A. SUSCEPTIBILITY 

Assuming that the enemy is alert and possesses weapons, 
aircraft susceptibility is influenced by the enemy's ability 
to detect, identify and track the aircraft; launch and 
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direct threat propagators toward the aircraft; and detonate 
them at or near the aircraft. If one identifies two phases 
during the flight of the aircraft, i.e., prelaunch and after 
launch of the threat propagator, then these abilities can be 
measured by P,p , the probability that the aircraft has been 
detected, identified and tracked, and by P Q , the proba- 
bility that a threat propagator is being launched and 
detonated at or near the aircraft. Thus, susceptibility P fi 
is given by 

P = P * P (1) 

H T *D ^ ±J 



B. VULNERABILITY 

Aircraft vulnerability is primarily influenced by the 
aircraft's design. Any survivability features built into 
the aircraft, such as redundancy, armor plating, and the 
ability of critical components to operate after taking a 
hit, will decrease its vulnerability, P K / H • 

The probability of the aircraft being killed, P R , is 
the product of its susceptibility and vulnerability. Thus 

P K - P H * P K/H < 2) 

P R is related to the probability of survival of the air- 
craft, P , by 
s 

P s * 1 - P K < 3 > 
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This study will examine the computation of the proba- 
bility of kill of an aircraft and how it is effected by 
redundancy and the number of hits that the aircraft has 
taken. 
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II. PROBABILITY OF KILL GIVEN A SINGLE SHOT 



The probability of an aircraft being killed given a 
single shot, p kss ' based on the assumptions that the 
aircraft has been detected, and that a threat propagator has 
been fired or launched. With these assumptions, the P KSS 
becomes solely a function of the fire control system's 
ability to direct the threat propagator in the vicinity of 
the aircraft and the aircraft's vulnerability. Thus, the 



expression for the P 



KSS 



in a one- dimensional analysis is 



KSS 



■r 



pH (x) * Pj^fx) dx 



( 4 ) 



and in a two-dimensional analysis is 



KSS 



•ff 

•'-CO j 0 



pH (x,y) * P K / H (x,y) dxdy 



( 5 ) 



where p^(x) is the probability of hit density function at 
x , and is th e probability that the aircraft will 

be killed given that it has been hit at x . 



A. PROBABILITY OF HIT DENSITY FUNCTION 

The probability of hit density function is the mathe- 
matical expression of the ability of a fire control system 
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to direct a threat propagator in the vicinity of the air- 
craft. In most P KSS assessments, the normal or Gaussian 
density function is vised. If the propagator paths are 
uniformly distributed around the aircraft, the one- 
dimensional circular normal is applicable. This function 
has the form 



p H(r) 




2 

exp ( - ) 

2<T 



0 < r < « (6) 



where r is the propagator miss distance (with respect to 
r = 0) , and a is the standard deviation, which is a 
me as ure of the dispersion of the shots about the target. 
This density function Pn( r ) is ussd to determine the 
probability that any shot will have a miss distance that 
lies within a certain band defined by r^ and r 2 . This 
probability is given by 



P hI 2 - exp ( - ^ ) dr (7) 

r l J r 1 a 2a 

It is important to note that the probability that any shot 
lies within the band = 0 and r 2 = » is unity. 

In the two-dimensional analysis, the bivariate normal 
distribution in the x-y intercept plane is used for the 
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probability of hit density function. This two-dimensional 
normal can be given in the form 



p H(x,y) 



2™ x o y 



exp 






where a x and a are the standard deviations in the x 

and y directions, respectively, and u and u are the 

x y 

mean values of the shots about the x and y axes , 
respectively. The mean value represents a bias or aiming 
error and is given by 

N N 

~ N X' x i ' y y ” N X^ y i 

where N is a large number of shots and x^ , y^ are the 
x and y coordinates of the ith miss distance. 

B. PROBABILITY OF KILL FUNCTION GIVEN A HIT 

For contact warheads, the aircraft vulnerability can be 
represented by the vulnerable area A v , where any hit within 
the vulnerable area causes an aircraft kill. In the one- 
dimensional analysis, the vulnerable area becomes a circle 
with a radius given by 

r 

v 
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and the P 
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K/H 




This type of kill function is referred to as a Cookie Cutter 
kill function. 

Another kill function of particular interest has the 
form 




(10) 



and is referred to as a Carleton kill function. Note, 



that once again, the area under this P 
vulnerable area A . 



K/H 



curve is the 



For the two-dimensional analysis, the circular Carleton 
kill function becomes 



P K/H (x ' y) = exp 



( -Ifc 



* 



( 11 ) 



2 2 2 
where r has been replaced by x + y in equation (10) . 
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Substituting equations (6) and (9) into equation (4) and 
evaluating the integral, the one- dimensional probability of 
kill given a single shot for the Cookie Cutter kill function 
becomes 

p kss 1 exp ( " * (12) 



When equations (6) and (10) are substituted into equation (4) , 
the one- dimensional probability of kill given a single shot 
for the Carle ton kill function becomes 



P = 
KSS 




(13) 



When equations (8) and (11) are substituted into equation (4) , 
the two-dimensional probability of kill given a single shot 
for the Carle ton kill function becomes 
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Thus, according to equation (15) , P KSS is 
of the aircraft' s vulnerable area. 

Detailed evaluations of equations (12) , 
are included in Appendix A. 



a linear function 
(13) and (14) 
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III. REDUNDANCY AND THE P. 



KSS 



As it was previously defined, vulnerability is the 
inability of an aircraft to withstand one or more hits by 
damage causing mechanisms. The higher the vulnerability of 
an aircraft, the worse its chances of survival are. Thus, 
one might say that vulnerability is a disadvantage in an 
aircraft. In order to reduce the vulnerability and overcome 
this disadvantage, designers are utilizing six vulnerability 
reduction concepts [1], one of which is component redundancy. 

An aircraft is comprised of a multitude of components, 
and each one of them contributes to the overall aircraft 
vulnerability. Some components contribute much more than 
the others, and for that reason they are called critical 
components. Thus, a component is categorized as critical, 
if a hit by a damage causing mechanism on the component 
leads to an aircraft kill. If an aircraft is comprised of 
N non- redundant critical components, then the aircraft will 
survive if and only if each of the N critical components 
survives. Thus, the aircraft's probability of survival 
after the first hit, P ^ , will be 

S 



P u) _ p in . p a) . p in. 

S St So So 



*P„ (1) (16) 
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(1) 



are the probabil- 



where P s (1 > , P s (1) , P s (1> ...P S 

S 1 s 2 3 N 

ities of survival of critical component 1,2,3,...N , after 

the first shot. If one takes into consideration equation 

(3) the probability of aircraft survival could be written as 



p (1) = n p (1) - n (i - p k (1) > (17) 

s i-l s i i=l k i 

where P ^ is the probability of survival of the ith com- 

i ( i) 

ponent after the first shot, and is the probability 

i 

of kill of the ith component after the first shot. 

If there are sets of redundant critical components, the 
validity of equation (16) breaks down, that is, a hit on a 
redundant critical component does not constitute an air- 
craft kill, since another component could sustain the air- 
craft flight. This can be best illustrated by the following 
example aircraft, which is comprised of four critical com- 
ponents, the pilot, the fuel tank and the redundant set of 
engines one and two. (The aircraft is assumed to be capable 
of flying on only one engine.) The probability that the 
aircraft will survive the first shot is 



p a) = p a) 

s s 



* P 



(1) 



* P 



( 1 ) 



(18) 



’EE 



where P , P and P are the probabilities 

p S F S EE 

of survival of the pilot, the fuel tank, and either one or 



both engines respectively, since both engines must be killed 
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simultaneously in order to kill the aircraft. The pro- 
bability that either engine one or engine two or both 
engines survive after the first shot is given by 



P in . i _ P a) * P a) 

S EE El *E2 



where P. and P. are the probability of kill of 
K E1 k E2 

engines one and two, respectively, and the product of 

P. and P. is the probability that both engines will 
*E1 k E2 

be killed by the first shot. This last concept is an 
interesting one and will now be investigated further. 

In the following investigation, the one-dimensional 
expression for the Cookie Cutter and Carleton kill functions 
will be utilized along with the one-dimensional probability 
of hit density function. First, using the Cookie Cutter- 
approach, figure 1 represents the situation for the vulner- 
ability of two separate redundant critical components. 
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In figure 1, the x-axis represents the aircraft length 
(vice area, since one-dimensional analysis is used) , a-b 
is the vulnerable length of redundant component one, and 
c-d is th.e vulnerable length of redundant component two. 

In this approach, the kills of redundant components one and 
two are mutually exclusive events; if component one is 
killed on the hit, then component two is still alive and 
vice versa, since only one vulnerable length could be hit 
at one time. 

With the Carle ton kill function shown in figure 2 
everything changes. As seen from figure 2, the kills of 
redundant critical components one and two are not mutually 
exclusive events. 



A/C centroid 

Figure 2. Vulnerability of Two Separate Redundant Critical 
Components , Carleton Approach 



D 



Probability of hit 
density function 
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to +«° will have a non- zero 



A hit anywhere from 
probability of killing both redundant critical components. 
In essence, the Carle ton kill function creates an overlap 
of the components. Thus, one hit can possibly kill the 
aircraft because both redundant components can be killed by 
one hit. 

Returning back to the example aircraft, equation (18) 
becomes 



p s (1) = (1 - P k (1) 



) Ml - P* 



(1) 



) * (1 - P. 



(1) 



^1 



* P, 



*E2 



( 1 ) 



) (20) 



This equation is valid for an aircraft with one set of two 
redundant critical components where only a kill of both of 
them will result in an aircraft kill. There are some 
other combinations of redundant critical components that 
one might encounter in a kill tree analysis. They are 

(1) A set of three- redundant critical components and 
only a kill of all three will result in an aircraft kill. 
For this parti cular combination, the aircraft kill logical 
expression due to just the redundant set will be 



A/C KILL rc = (RC1. AND. RC2.AND.RC3) 



while the probability of any one, any two or all three 
components surviving the first shot, will be given by 
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p (1) = 1 - P k (1) * P k (1) * P k (1) 
S RC RC1 RC2 K RC3 



where P v , P, , P, are the probabilities of 

k RC k RC2 k RC3 

kill for redundant critical components one, two and three, 
respectively. 

(2) A set of three redundant critical components and 
a kill of any two out of three will result in an aircraft 
kill. The logical expression for this combination is 

A/C KILL rc = (RC1.AND.RC2) .OR.' (RC2. AND. RC3) .OR. (RC1. AND. RC3) 



while the probability of any two or all three redundant 
critical components, surviving the first shot will be 

p (1) = 1 - p u> . P (1) . p (1) . p (1) . 

r <3 X He *1 r e ]r *\r 

RC RCL RC2 RC2 RC3 

(22) 

- p (D * p <D + p (1) * p (1) * p (1) 

k r k + ^k *k 

PCI PC3 PCI PC2 PCI 



(3) A set of four redundant critical components and a 
kill of any two out of four will result in an aircraft 
kill. The logical expression for this combination will 
be 



A/C KILL rc = (RC1.AND.RC2) .OR. ( RC1. AND. RC3) .OR. (RC1. AND. RC4) 
.OR. (RC2.AND.RC3) . OR.(RC2.AND.PC4) .OR. (PC3.2ND.PC4) 
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while the probability of any two, three or all four critical 
components surviving the first shot will be. 



P (1) _ 1 . P u> . P U) . P u> . P u> 

S !C k ld k K2 Sa k FC3 

p ID * p (1) 

K PC2 K EC3 



, (1) * p (1) 

K RC3 k BC4 



> + P t * P v 

K BC3 K RC1 K RC2 



, (1) + p (1) * p (1) 

k RC4 k RC2 k EC3 

, (1) * p (1) 

k r k 

PC3 K RC4 

(4) A set of four redundant critical components 
kill of any three out of four will result in an aircraft 
kill. The logical expression for this combination is 

A/C KILL rC = (RC1 . AND. RC2 .AND. RC3) .OR. (RC1. AND. RC2 . AND. RC4) . 
.OR. (RCl.AND. RC3. AND. RC4) 

.OR. (RC2. AND. RC3. AND. RC4) 

while the probability of any one, two, three or all four 
redundant components surviving the first shot will be 



* P,. 



* P, 



(1) 

"RC4 

( 1 ) 

RC4 



K 



(23) 



and a 



, O) . p (1) 

lc 1c 

PCI PC4 



> (1) * p (1) 

k *k 

K PC2 K RC4 



, CD * p (1) 

k RCl k RC2 



, (D * P (1) 

k Rd k RC3 

, (1) *p (1) 

k RCL k RC2 
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(1) 



(1) 



(1) 



(1) 



p = 1 - P k '■ L ' * P k Vi ' * P k 

S RC RC1 RC2 *RC3 



. p (1) * p (1) * p (1) 

]r lr ]r 

K RC1 K RC2 *RC4 



- P 



(1) * p <U* p (1) 

V r k r k 

RC1 RC3 RC4 



. p (i) * p CD * p CD 
r k r k r k 

K RC2 kC3 J rC4 



+ p Cl) * p (1) * p (1) * p (1) 

T r k r k r k r k 

*RC1 J rC2 k RC3 K RC4 



(24) 



(5) A set of four redundant critical components and a 
kill of all four only will result in an aircraft kill. 

The logical expression for this combination will 

A/C KILL rc = RC1.AND. RC2 . AND. RC3. AND. RC4 

while the probability that any one, two, three or all four 
redundant components will survive the first shot will 

P (1) = 1 - P. (1) * P. (1) * P. (1) * P k (1) (25) 

S RC *RC1 K RC2 K RC3 K RC4 
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IV. P k/H AND REDUNDANCY 



The analysis done in the previous chapter, though 
necessary, was limited to the probability that an aircraft 
is killed due to a single shot. A further and more 
realistic analysis stems from the fact that in any given 
combat scenario, an aircraft is likely to take multiple 
hits. Thus, the total probability of kill of an aircraft 
that has taken multiple hits will now be examined. 

If one assumes that an aircraft consists of N critical 
components and that it has taken n hits is given by 



P = p 

s i s i 



(1) 



* P. 



( 2 ) 



* P 



( 3 ) 



s i 



* P 

• • • XT 



{n) = n p (j) 

J=1 s i 



(26) 



where P , P , P . ..P_ are the probabil- 

s i s i s i s i 

ities that the ith critical conponent will survive the 

first, second, third. ..nth hit, respectively. Using a 

parallel which may be inferred from equation (17) , 



v <n> ■ s 



j=i 11 ' w 



(27) 



where ? k/h ^ is the probability that the ith component will 
be killed by the jth hit. In a similar manner, the total 
probability of aircraft survival after n hits can be 
derived to yield 
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(28) 



p (n) 
s 



n 



jii u - v 3 ’ 



where P R y H ^ is the probabiiitY that the aircraft will be 
killed by the jth hit. 

In the case of an aircraft consisting of only non- 
redundant critical components, the p K/ / H does not change 
with each hit because the vulnerable area is constant for 
each hit. However, in the case of redundant critical com- 
ponents, p k/h changes considerably due to the increasing 
probability the redundant critical components are killed and 
thus, it will be studied separately. 

The simplest approach to the P K / H with redundancy 
study is through the use of a kill tree diagram. For that, 
assume an A/C consisting of three non-redundant critical com- 
ponents CC1, CC2 and CC3, with individual probabilities of 

kill P K / H > p k/H ' P K/H ' respectively, and or set of 
12 3 

two redundant critical components RCC1 and RCC2 with indi- 

, re spec- 
'll 

tively. Thus, the kill diagram is depicted on 



vidual probabilities of kill P v /x . and P„ 

K/H Ri K/H R2 



figure 3 for the first hit on the aircraft and the P 
for the Cookie Cutter approach becomes 



-U) 



K/H 



p “ ( D _ p 

K r K/H. 



+ P 



K/H. 



+ P 



K/H. 



(29) 
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Figure 3. Aircraft Kill Tree Diagram, First Hit 



In order for the A/C to be killed by the second hit, one 
must assume that it survived the first hit, and therefore 
only the RCC1, RCC2 and NK1 branches will be affected by 
the second hit. Thus, the kill tree for the second hit 
alone is depicted on figures 4a, 4b and 4c. 



RCC1 




(KILL) (KILL) (KILL) (NO KILL) (KILL) (NO KILL) 

Figure 4a. Aircraft Kill Tree Diagram, Second Hit Alone 
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RCC2 




Figure 4b. Aircraft Kill Tree Diagram, Second Hit Alone 




Figure 4c. Aircraft Kill Tree Diagram, Second Hit Alone 



Thus, the probability of the A/C being killed by the second 
hit alone becomes 
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“k 



( 2 ) 



p (1) * L (2) + p < 
P ^/HrI \ k/H l k/H 2 



' J 



. p U) * L (2) + p (2) (2) (2)\ 

+ P k/H^2 l k / H i k/H 2 k/H 3 k / H Rl/ 



+ P J 1 )*^p (2 > 



k/H 



* P 



Rl 



k/H 



( 2 )' 



R2 



(30) 



where P ^ is the probability that all of the critical 
components survived the first hit (the NK1 branch) . Thus , 



the total probability of kill for the two hits P 
becomes 



-( 2 ) 



K/H 



p "(2) _ p -U) . p (2) 

K K *K 



(31) 



One could go on to the third and subsequent hits in a 
similar manner, and the P K / H will be increasing as more 
and more terms are added for the subsequent hits. 

Another method of computing the total probability of 
kill is the transition matrix method [2], Using that 
method on the following example aircraft, one can clearly 
see the effect of redundancy on the p K/ / H • 
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A/C #1 (NO REDUNDANCY) 



CRITICAL COMPONENT 


v ft2) 


P k/h. 


V (ft2 > 

1 


Pilot 




5 


1.0 


5 


Engine 




30 


. 8 


24 


Fuel Tank 




40 


.6 


24 


Controls 




25 


.6 


15 


Total aircraft 


area present to the threat propagator is 


assumed to be A„ 

P 


= 500 


ft 2 , and A 

p i 


is the 


area pre- 


sen ted by the ith 


component, P^^ 


is the probability of 


ith component given a hit on the ith 


component 


/ and A v 
The 


is the vulnerable 


area 


of the ith component. 


logical kill expression 


for this aircraft will 


be 


A/C KILL = PILOT. OR. ENGINE. OR. FUEL. OR 


.. CONTROLS 




A/C #2 (25% REDUNDANT) 


A = 500 ft 2 
P 






CRITICAL COMPONENT 


A (ft 2 ) 


P k/h. 


A Vi (f t 2 ) 


Pilot 




5 


1.0 


5 


Engine 




30 


.8 


24 


Fuel Tank 




40 


.6 


24 


Controls I 




12.5 


.6 


7.5 


Controls II 




12.5 


.6 


7.5 
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The logical expression for this aircraft is 

A/C KILL = PILOT. OR. ENGINE. OR. FUEL. OR. (CONTROLI. AND. CONTROLII) 



A/C 


#3 (46% REDUNDANT) 


A = 530 ft 2 
P 








CRITICAL COMPONENT 


A p. (ft2 > 


P. /h. 
k' l 


A Vi (ft 2 ) 




Pilot 


5 


1.0 


5 




Engine I 


30 


.8 


24 




Engine II 


30 


.8 


24 




Fuel Tank 


40 


.6 


24 




Controls 


25 


.6 


15 


The 


logical kill expression for this 


aircraft is 




A/C 


KILL = PILOT. OR. FUEL. OR. CONTROLS 


.OR. (ENGINEI 


.AND. 




ENGINEII) 








A/C 


#4 (77% REDUNDANT) 


A = 530 ft 2 
P 








CRITICAL COMPONENT 


A (ft 2 ) 
P i 


P k /hi 


V <ft2 > 

l 




Pilot 


5 


1.0 


5 




Engine I 


30 


.8 


24 




Engine II 


30 


.8 


24 




Fuel Tank I 


20 


.5 


10 




Fuel Tank II 


20 


.5 


10 




Controls 


25 


.6 


15 


The 


logical expression 


for A/C #4 is 







A/C KILL = PILOT. OR. CONTROLS. OR. (ENGINEI. AND. ENGINEII) . 
OR. (FUELI.AND.FUELII) 
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TABLE 1 



CUMULATIVE PROBABILITIES OF KILL FOR EXAMPLE AIRCRAFT 







A/C #1 


A/C #2 


A/C #3 


A/C #4 


p -(1) 

*k 




.1360 


.1060 


.0830 


.0377 


V (2) 


= 


.25 35 


.2012 


.16 32 


.0788 


p *(3) 
*k 


= 


.3550 


.2866 


.2397 


.1220 


p "(4) 
k 


= 


.422 7 


. 3633 


.3117 


.1662 


V (5) 


= 


.5185 


. 4320 


.3788 


.2107 


p "(6) 
*k 


= 


.5840 


.4934 


.4411 


.2548 


V (7) 


= 


.6406 


.5485 


.4984 


.2981 


i 

00 


= 


.6895 


.5978 


.5508 


. 340 3 


^' <9) 


= 


.7317 


.6418 


.5986 


. 3809 


P -(10) 
*k 


= 


.76 82 


.6 811 


.6419 


.4199 


Figure 5 


compares 


i the P^ 


for the 


non redundant 


aircraft 



with redundant aircraft #2, 3 and 4. 
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0 

9 

8 

7 

6 

5 

4 

3 

2 

1 

0 



i ■ — i i ■ i i i > i 



A/C#l 
A/C #2 



A/C#l 




1 2 345678 9 10 

# of hits 

5. CUMULATIVE PROBABILITY OF KILL VERSUS NUMBER OF 
HITS 
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Note that the values of 
while the values of A v 



i and P, - are assumed. 

Pi k/h. 

are computed through the equation 





* 




( 32 ) 



Through the use of the transition matrix method (see 
Appendix B) , the values of ' for the example aircraft 
have been found and are presented in Table 1. 

As can be very easily seen from Table 1, the P^ for 
the same shot deoreases, as the redundancy of the example 
aircraft increases. 
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V. AFATL POOL COMPUTER PROGRAM AND THE P R/H 

As shown by the previous chapters, the determination of 
the survivability of an aircraft can be a very complex and 
time consuming task. Thus, the aid of the computer has been 
employed, and several programs have been developed by both 
the military and the civilian industry. One that was 
selected for use by the Joint Technical Coordinating Group 
for Aircraft Survivability (JTCG/AS) Survivability Assessment 
Subgroup, is the Antiaircraft Artillery Simulation Computer 
Program, AFATL Program P001. This program is currently in 
use at the Naval Postgraduate School and is the one that 
this study will be concerned with. 

Many modifications have been made to the P001 that was 
originally developed by the Weapons Systems Analysis 
Division of the Air Force Armament Laboratory at Eglin Air 
Force Base, Florida. The latest version of it used by Naval 
Weapons Center, China Lake, employs an aircraft consisting 
of twenty (20) critical components and computes the single 
shot probability of kill of a target (after consideration 
is given to various errors in predicting an aircraft/ 
projectile intercept point) . Computation of the P RSS is 
performed throughout the entire flight path and after the 
accumulation of all shots, the total probability of target 
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attrition is presented. In the computation of the cumulative 
p_ , redundancy of the critical components has not been 
taken into consideration. This is a potential source of 
error in the final results, since the majority of the 
present aircraft have some degree of redundancy. 

In the latest version of P001, the computation of the 
single shot probability of kill is performed in the "FIRE" 
section of the program. The equation used to compute the 
probability of killing, at least one critical component by 
a single round, P R , is presented on line 717 of the 
program listing given in Appendix C, and it states 

pK = PK + PKS(IJ) - Pk*PKS (IJ) = PK + PKS(IJ) *(1 - PK) 

where the initial value of P K is set to zero and p ks(IJ) 
is the probability of killing component IJ by a single 
round. This equation does not account for redundancy 
because component IJ might be redundant in the aircraft 
and killing it will not constitute an aircraft kill, as it 
was discussed in Chapter 3. Thus, in order for the program 
to account for possible redundancy of components, the 
following changes and additions to P001 are recommended. 
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Define : 



IJ1 = the total number of non-redundant components 
IJ22 = the total number of sets of two redundant conponents 
of which two must be killed for a subsystem kill 
IJ23 = the total number of sets of three redundant components 
of which two must be killed for a subsystem kill 
IJ33 = the total number of sets of three redundant components 
of which three must be killed for a subsystem kill 
IJ24 = the total number of sets of four redundant components 
of which two must be killed for a subsystem kill 
IJ34 ■= the total number of sets of four redundant components 
of which three must be killed for a subsystem kill 
IJ44 = the total number of sets of four redundant components 
of which four must be killed for a subsystem kill 
Thus, IJ = I Jl+2* (IJ22) +3* (IJ2 3+IJ33) +4* (I J24+IJ34+IJ4 4) < 20 
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De fine : 
MN (I) 

M22(I,J) 

M2 3 (I , J) 

M33(I,J) 

M24(I,J) 

M34 (I , J) 

M44(I,J) 



A column, matrix containing the numbers of the non- 
re dun dant components (1=1, 1 Jl) 

A (IJ22x2) matrix containing the IJ22 pairs of 
redundant components (I=1,IJ22, J=l,2) 

A (IJ23x3) matrix containing the IJ23 sets of 
three redundant components (I=1,IJ23, J=l,3) 

A (IJ33x3) matrix containing the IJ33 sets of 
three redundant components (I=1,IJ33, J=1 , 3) 

A (IJ24x4) matrix containing the IJ24 sets of 
four redundant components (I=1,IJ24, J=l,4) 

A (IJ34x4) matrix containing the IJ34 sets of 
four redundant components (I=1,IJ34, J=l,4) 

A (IJ44x4) matrix containing the IJ44 sets of 
four redundant components (I=1,IJ44, J=l,4) 
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The user must create a file containing the number of the 
non- redundant components, then redundant components them- 
selves, the number of the IJ22,IJ23,IJ33,IJ24,IJ34,IJ44 sets, 
and the numbers of the components that belong to each set as 
shown below: 



Once the file is constructed, the MN,M22,M23,M33,M24,M34,M44 
matrices can be read, with the following routine: 

READ(2 , *) (TEMP (I) ,1=1,38) 

1=1 

IJ1=TEMP (I) 

IF IJ1=0 GO TO 6 
DO 5 K= 1 , 1 J 1 




etc. (max # of 
characters = 38) 




IJ1 



2*IJ22 



3*1 J2 3 



MN (K) =TEMP (I+K) 



5 CONT 



6 I=1+IJ1+1 



IJ22=TEMP (I) 



IF I J22=0 GO TO 10 
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15 

10 

25 

20 

35 



DO 15 K=l, IJ22 

M2 2 (K , 1) =TEMP (I+K) 
M22 (K , 2 ) =TEMP ( I+K+ 1) 
1 = 1+2 

CONT 

I=2+IJ1+2*IJ22+1 
IJ2 3+ TEMP (I) 

IF I J2 3=0 GO TO 20 

DO 25 K=1,IJ23 

M2 3 (K, 1) =TEMP (I+K) 

M2 3 (K , 2 ) +TEMP ( I+K+ 1) 
M2 3 (K, 3) =TEMP (I+K+2) 
1=1+3 

CONT 

I=3+IJl+2*I J22+3*I J2 3+1 
I J3 3= TEMP (I) 

IF IJ33 =0 GO TO 30 
DO 35 K=1,IJ33 

M33(K f 1) =TEMP (I+K) 

M3 3 (K , 2 ) =TEMP ( I+K+ 1) 
M33(K, 3) =TEMP (I+K+2) 
1=1+3 

CONT 
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30 

45 

40 

55 

50 



1=4+1 Jl+2*IJ22+3*IJ2 3+3*1 J33+1 
IJ2 4=TEMP (I) 

IF IJ2 4=0 GO TO 40 

DO 45 K=1,IJ24 

M2 4 ( K , 1) =TEMP ( I+K) 

M2 4 (K , 2) =TEMP ( I+K+l) 

M2 4(K, 3)=TEMP (I+K+2) 

M2 4 (K , 4) =TEMP ( I+K+ 3) 

1=1+4 

CONT 

1=5+1 Jl+2*IJ2 2+3*1 J2 3+3*1 J 3 3+4*1 J2 4+1 
I J34=TEMP (I) 

IF I J 34=0 GO TO 50 

DO 55 K=1,IJ34 

M34 (K, 1) =TEMP (I+K) 

M34 (K,2) =TEMP (I+K+l) 

M34 (K, 3) =TEMP (I+K+2) 

M34 (K, 4) =TEMP (I+K+3) 

1=1+4 

CONT 

I=6+IJ1+2*IJ22+3*IJ2 3+3*1 J3 3+4*1 J2 4+4*IJ34+l 
I J4 4= TEMP (I) 

IF I J44=0 GO TO 60 
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DO 65 K=1,IJ44 

M44(K,1)=TEMP(I+K) 

M44 (K ,2) =TEMP (I+K+l) 

M44 (K , 3) =TEMP (I+K+2) 

M44(K,4)=TEMP(I+K+3) 

1=1+4 

60 STOP 
END 

Once the matrices have been constructed, the following 
subroutine could be used to compute the cumulative prob- 
ability of aircraft survival. The cumulative probability 
of kill of each of the components (CPKS(IJ)) is computed 
at line 722. This probability is computed for all of the 
components in the DO to 460 loop. Immediately after the 
460 loop (before line 72) a call to the following sub- 
routine should be made. The parameter computed by this 
subroutine is the probability the aircraft has survived 
the en com ter up to the current time, PS , the cumulative 
probability of survival. Note that the PK and PS 
computed at lines 717, 727, and 732 are no longer valid 
when redundant components are introduced. 
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PS=1 . 

IF IJlsO GO TO 10 
DO 5 K=1 , IJ1 

L=MN (K) 

PS=PS* (l.-CPKS(L) ) 

CPKS is the cumulative probability of survival of the 
component 
5 CONTINUE 
10 IF IJ22=0 GO TO 20 
DO 15 K=l, IJ22 

L=M22(K / 1) 

M=M22(K,2) 

PS=PS* (1. -CPKS CL) *CPKS (M) ) 

15 CONTINUE 
20 IF IJ23=0 GO TO 30 
DO 25 K«1,I J23 

L=M23(K,1) 

M=M23(K / 2) 

N=M23(K / 3) 

PS=PS* (1 .-CPKS (L) *CPKS (M) -CPKS (L) *CPKS (N) 

-CPKS (M) *CPKS (N) +CPKS (L) *CPKS (M) *CPKS (N) ) 

25 CONTINUE 
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30 IF IJ33=0 GO TO 40 
DO 35 K=l, I J33 

L=M33 (K, 1) 

M=M33 (K, 2) 

N=M33 (K, 3) 

PS=PS* ( 1. -CPKS (L) *CPKS (M) *CPKS (N) ) 

35 CONTINUE 
40 IF IJ24=0 GO TO 50 
DO 45 K=1,IJ24 

L=M24 (K, 1) 

M=M24(K,2) 

N=M24(K / 3) 

I=M24 (K, 4) 

PS=PS* (l.-CPKS (L) *CPKS (M) -CPKS(L) *CPKS (N) -CPKS (L) 

* *CPKS (I) -CPKS (M) *CPKS (N) -CPKS (M) *CPKS (I) 

* -CPKS (N) *CPKS (I) +CPKS (L) *CPKS (M) *CPKS (N) 

* +CPKS (L) *CPKS (M) *CPKS (I) +CPKS (L) *CPKS (N) 

* *CPKS (I) +CPKS (M) *CPKS (N) *CPKS (I) +CPKS (L)*CPKS (M) 

* *CPKS (N) *CPKS (I) ) 

45 CONTINUE 

50 IF IJ34=0 GO TO 60 
DO 55 K=1,IJ34 

L=M34 (K, 1) 

M=M34(K,2) 

N=M34 (K, 3) 

I=M34(K / 4) 
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55 

60 

65 

70 

100 



PS=PS* (1 . -CPKS (L) *CPKS(M) *CPKS (N) -CPKS (L) *CPKS (M) 
*CPKS (I) -CPKS (L) *CPKS (N) *CPKS (I) -CPKS (M) 

*CPKS (N) * CPKS (I) +CPKS (L) *CPKS (M) *CPKS (N) 

*CPKS (I) ) 

CONTINUE 

IF IJ44=0 GO TO 70 
DO 65 K=l, I J44 

L=M44 (K , 1) 

M=M44(K,2) 

N=M44 (K, 3) 

I=M44 (K, 4) 

PS=PS* (1. -CPKS (L) *CPKS (M) *CPKS (N) *CPKS (I) ) 
CONTINUE 

WRITE (6,100) PS 

FORMAT ( '1, 'THE CUMULATIVE PROBABILITY OF SURVIVAL IS, 
F9.7) . 

RETURN 

END 



45 



VI . CONCLUSIONS 



The probability of kill of an aircraft given a single 
shot is a linear function of the aircraft's vulnerable area. 
Redundancy of critical components greatly enhances the 
probability of survival and in the Cookie Cutter approach 
the kills of redundant critical components are mutually 
exclusive events, where as in the Carleton approach they 
are not. For an aircraft, hit by multiple shots the 
cumulative probability of kill for the same shot decreases 
as the redundancy built into the aircraft increases. The 
modifications proposed in Chapter V should provide a 
significant improvement in the overall efficiency of the 
Antiaircraft Artillery Simulation Computer Program, since 
it will provide for aircraft redundancy. 



46 



APPENDIX A 



EVALUATION OF EQUATIONS 



(1) Evaluation of equation (12)* 



KSS 



f r v , 2 » 

-J (i) * f- -- p (- ) 



dr (1) 



Using integration by parts, let - = u 

2a 

2 r 

Differentiating results in - — dr = du 

2a 

Therefore 



KSS 



= J"- exp(u) du = - exp j 



r z r 2 

~ exp (- — ,v * ) ~ (-1) = 1 - exp - — 

' 2a 1 2a 2 



Since A = Hr 
v v 



P KSS " 1 * e *P (" 



2IIa 



(2) Evaluation of equation (13). 



KSS 



“I 7 exp ('f7)* exp ('r?) 



dr 



-I. 



~2 exp 
a 



- r 



(5*^) 



dr 
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Using integration by parts , let - r 2 ^ ) = u 



2 a r 



Differentiation yields - 2r 






v 



dr = du 



therefore 



P KSS 


2a 2 (-i=- + 
2a^ 


-4) 


or 






p = 


1 




KSS 


2C 2 (-iy + 
2a^ 


r v 




1 





exp(u) du = 



■f 



2c ^ (-ij + 

20 V 



- exp 



- r 



<***>ir 



v ro 



1 + 



2c 



* I- 0 + ll = 



_ 2 _ 2 
T v + 2a 



and for 



A v = tr v 



2 ° 2 
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(3) Evaluation of equation (14) 



00 



KSS 



I 



P H (x ,y) *P K/ , H (x,y) dxdy 



P„ = 



H 2ira 



V- ex p (- 1 

*2 ^2 ' 



(x-y ) (y-y 
± — + 



^2 



P K/H GXp 






Thus 



KSS 



-Q-fcH-*R 



exp 



Expanding and combining terms yields , 



exp 






x_ 

X, 



KSS 



2iro a 
x 2 ^2 



.00 - 

Lhh 



1 . 1 \ 2 
T + t\ x 



V a x °x ‘ 
X 1 x 2 
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+ {t* + 7*y ‘ ffi) * 

v Yi y 2 ^2 



dxdy 



Separating variables and making substitutions yields, 



exp t - T 



yii 



KSS 



2ira a 
x 2 *2 



/• 00 - 00 

* exp [- P x 2 *x 2 +q x *x]dx exp[- ,py 2 *y 2 +qy*y]dy ( 2 ) 

— a> ■'-co 



where 



2 1,1 



p x " 2 ( 



a 2 a 2 
X 1 x 2 



) 



„ 2 _ 1 , 1 
p v J ( — 



*1 



JSc 

a 



*2 



a. 
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Integrating each integrand I and I yields 

x y 



-H- 



P x 2 *x 2 + q x *x 



jdx = J exP |” | 



2* 2 * 
p x -q *x 
r x ^x 



2 2 
q x q x ) 

+ 7-2 - f -2 dx 

4 P X 4 ?x > 






2 22 



4p 



x 



) >dx 



= exp 






dx 



Let u = p *x - -x — then du = p dx 
x ^p x x 



then I x = exp ( - x 3 ) * | exp (-u 2 ) du 



4 P, 



tf 

— c 



tr( 



But in general, — ' - ■ I exp <( - i z 2 J. dz = 1 or 

>/ZF" 1 1 



f 



exp | j zM dz = / 2 ir 
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2 12 1 

Let u' « ± z then du = - — dz and 

2 ST 



/7 f exp | | du = /2it or 

00 
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similarly 
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exp 



H 



2 

<*y 

y 2 



2 2 
u a 

y y i 



( 



A 2 \ 2 
+ a \ a. 



y 2 ; y 2 



or 



a.. *a_ 



: 1 y l 



KSS 






2 * 






exp 






X + 

7 



a + a 
X 1 x 2 



a + a 

Yi y 2 



If we assume that a - a and A = 2 ira a 

X 1 y l v X 1 y l 

the P KSS becomes 



V 27r 



KSS 



J 5 ^ / I ^ 

^ a x 2 + 2 tt ^ a y 2 + 2? 



* exp 



I' * 



2 . \ 

°x 2 + 2x 



„ 2 + A v 

°y 2 



or 



A v /2ir 



KSS 



Vo 2 + § i 2 + i* 

x 2ir y 2 tt 
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exp 



★ 
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APPENDIX B 



P v CALCULATIONS THROUGH THE TRANSITION MATRIX METHOD 



TABLE 2 



Confutation 


of 


the Transition Matrix 


(T) for Example A/C #3 


Probability 


of 


Transitioning from 


this State to this S tate 


Knrc 


Krcl 


Krc2 Krc 


Nk 




1 




5+24+15 

530 


5+24+15 

530 


0 


5+24+15 

530 


Knrc 


0 




24+438 

530 


0 


0 


24/530 


Krcl 


T. = 

3 0 




0 


24+438 
5 30 


0 


24/530 


Krc2 


0 




24/530 


24/530 


1 


0 


Krc 


0 




0 


0 


0 


438/530 


Nk 


(Note that 


the 


sum of 


each column 


is 


unity . ) 





Now, let the probability that the aircraft exists in each of 
of the five possible states after the jth hit be expressed 
by a vector {s i ^ , where 




Knrc 

Krcl 

Krc2 

Krc 

Nk 



(j) 
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The probability that the aircraft is in each of the five 
states after the (j+l)th hit is 

{s} ( 3 +1) = [T]{s} ( 3> (B-l) 

that is, the aircraft transition from j S J- ^ ^ to js|^ + ^ 
to [T 3 • Thus, the cumulative probability the aircraft is 
killed after j+1 hit, • is given by 

P k < 5 +1 > = Knro<5 +1) + Kro ( i +1 > 



Prior to the first hit, the aircraft is entirely in the Nk 
state. Thus, according to equation (B-l) , 



( 0 ) 



{s} (1> = m{s}°= [t] 



and hence. 




*“Nk 



W 



( 1 ) _ 



( 1 ) 



Thus 



/ 44/530 \ / 


' .0830 \ 


l 24/530 I 1 


l .0452 I 


l 24/5 30 > = <! 


* .0452 > 


0 l 


0 \ 


^ 438/530 / 


< .8264 ) 


= .0830. 





(1) 

Knrc 



«~Krc 
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Similarly, for the second hit. 



{s } 2 = [Ilfs } 1 



( 1 ) 



[T] 



.0830 \ 

.0452 

.0452 

0 

.8264 > 




5 30" 



530*44+44*24+44*24+44*438' 
462*24+24*438 
462*24+24*438 
24*24+24*24 
438*438 




.1591 
.0769 
.0769 
.0041 
.6 829 




< Knrc 



< Krc 



Thus, after the second hit 

P r (2) = .1591 + .0041 

Similarly, the values for P R , P R ^ , etc., 
obtained to yield Table 1. 



are 
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703 

704 

705 

706 

707 

70 8 

709 

710 

711 

712 

713 

714 

715 

716 

717 

718 

719 



APPENDIX C 



P001 'FIRE' SECTION 



C 

C COMPUTE SURVIVAL AND KILL PROBABILITIES 

C 

STUFF= DIVIDE (BXF2 , CSXF2+AVTPI) ) +DIVIDE 
(BYF2 , (SYF2+AVTPI) ) 

C 

CC PKS(IJ) IS THE PROBABILITY OF KILLING COMPONENT IJ 
BY A SINGLE ROUND 
CC (ONE BARREL) 

C 

PKS (IJ) =AMIN1 (1. 0 , DIVIDE (EXP (-. 5*STUFF) *AVTPI , 
SQRT ( (SXF2+1AVTPI) * (SYF2+AVTPI) ) ) ) 

C 

CC PK IS THE PROBABILITY OF KILLING AT LEAST ONE 
COMPONENT BY A SINGLE 
CC ROUND (ONE BARREL) 

C 

PK=PK+PKS (IJ) — PK*PKS (IJ) 

C 

CC CPKS(IJ) IS THE CUMULATIVE PROBABILITY OF KILLING 
COMPONENT IJ 
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720 

721 

722 

72 3 

724 

725 

726 

727 

728 

729 

730 

731 

732 

733 

734 



CC BY THIS GUN LOCATION FOR THE ENTIRE AIRCRAFT FLIGHT 
PATH 
C 

460 CPKS(IJ)=CPKS(IJ) + U-U^KStIJ) ) **ISB) -(CPKS (IJ) * 
* (1— (1—PKS (IJ) **ISB) ) 

C 

CC PS IS THE PROBABILITY OF ALL COMPONENTS SURVIVING 
ISB BARRELS FIRING 
C 

PS= (1. 0-PK) **ISB 
C 

CC PK IS THE PROBABILITY OF KILLING AT LEAST ONE 
COMPONENT BY ISB 
CC BARRELS FIRING 
C 

PK=1.0-PS 

TI=TIME+T 

C 
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